57 matches found
SUSE: Security Advisory (SUSE-SU-2026:0762-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2026:20320-1 Security update for freerdp2
This update for freerdp2 fixes the following issues: Changes in freerdp2: - Multiple CVE fixes: CVE-2026-24491, bsc1257981, CVE-2026-24675, bsc1257982, CVE-2026-24676, bsc1257983, CVE-2026-24679, bsc1257986, CVE-2026-24681, bsc1257988, CVE-2026-24682, bsc1257989, CVE-2026-24683, bsc1257990,...
SUSE SLES15: freerdp / freerdp-devel / freerdp-proxy / freerdp-server / etc (SUSE-SU-2026:0649-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0649-1 advisory. - CVE-2026-24491: heap-use-after-free in videotimer bsc1257981. - CVE-2026-24675: heap-use-after-free in urbselectinterface...
Fedora: Security Advisory (FEDORA-2026-fa67f40526)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2026-24491
creationtimestamp| type| source ---|---|--- 2026-02-10 15:42:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejcgokdxb2x...
CVE-2026-24491
A use after free flaw has been discovered in FreeRDP. The videotimer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. A malicious server can trigger a client‑side heap use after free causing a crash DoS. Mitigation...
DEBIAN-CVE-2026-24491
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, videotimer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fixed in 3.22.0...
CVE-2026-24491
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, videotimer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fixed in 3.22.0...
CVE-2026-24491 FreeRDP has a heap-use-after-free in video_timer
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, videotimer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fixed in 3.22.0...
CVE-2026-24491
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, videotimer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fixed in 3.22.0...
Linux Distros Unpatched Vulnerability : CVE-2026-24491
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, videotimer can send client notifications after the control channel is closed,...
Intel® Killer™ Software Advisory
Summary: A potential security vulnerability for some Intel® Killer™ Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24491 Description: Uncontrolled search path for some Intel® Killer™...
CVE-2020-24491
Debug message containing addresses of memory transactions in some IntelR 10th Generation Core Processors supporting SGX may allow a privileged user to potentially enable information disclosure via local access...
CVE-2024-9252
Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2024-9252 Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability
Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2024-9252
Summary: CVE-2024-9252 affects Foxit PDF Reader/Editor through the AcroForm handling use-after-free, enabling information disclosure and potentially arbitrary code execution when a user opens a malicious file/page. The flaw occurs from not validating object existence before operations, and is doc...
Citrix Secure Access < 23.5.1.3 Privilege Escalation (CTX561480)
A privilege escalation vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT...
CVE-2023-24491
creationtimestamp| type| source ---|---|--- 2023-07-12 02:29:55+00:00| seen| https://t.me/cibsecurity/66455 2023-07-12 16:23:23+00:00| seen| https://t.me/truesecator/4607...
CVE-2023-24491
A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...
CVE-2023-24491
The CVE-2023-24491 vulnerability affects the Citrix Secure Access client for Windows (versions before 23.5.1.3). It enables a local Privilege Escalation from a Standard User to NT AUTHORITY\SYSTEM when the vulnerable client is present on the endpoint. Citrix’ security bulletin (CTX561480) indicat...